Lume

Privacy Policy

Last updated: June 30, 2026

Lume ("the app", "we", "our", or "us") is a personal finance tracker for iOS, developed and published by Mikhail Pak as an independent developer. This Privacy Policy explains what information the app handles, how it is stored, and the limited circumstances in which it is shared.

We have designed Lume to keep your financial information private. The app does not require an account, and we do not operate servers that store your transactions, balances, or other financial records.

Summary

No account. You can use Lume without signing up or logging in.
Your data stays with you. Everything you enter is stored on your device and, if you have iCloud enabled, in your own private iCloud account. We cannot see it.
No analytics or tracking. Lume contains no analytics, advertising, crash‑reporting, or third‑party tracking SDKs.
AI parsing is optional. When you add a transaction by voice or by scanning, uploading, or sharing a receipt, the resulting text (a speech transcript or text read from the image on your device) is sent for AI parsing. Receipt and photo images are read on your device and are never uploaded — only the extracted text is sent. This text is processed transiently and is not stored by us.

Information the App Handles

1. Financial information you enter

When you use Lume you may create transactions, wallets, budgets, categories, and notes (for example: amounts, dates, merchant or note text, wallet names, and category labels). This information is stored locally on your device and is synced to your private iCloud account if iCloud is enabled (see Storage and Sync below). It is not transmitted to us.

2. Microphone and speech

If you choose to add a transaction by voice, the app records audio and converts it to text using Apple's on‑device/server speech‑recognition services. Apple's handling of this audio is governed by Apple's Privacy Policy. The app only accesses the microphone while you are actively recording a voice entry.

3. Camera, photos, and shared receipts

You can add a transaction by scanning a receipt with the camera, choosing a photo from your library, or sharing a receipt, order summary, or payment confirmation to Lume from another app. In every case the image is read on your device using Apple's on‑device text recognition. The image itself never leaves your device — only the text recognized from it is used for AI parsing (see the next section). The app accesses the camera or the specific photo you choose only for this purpose.

4. Voice transcripts and receipt text for AI parsing

Whether the text comes from a voice transcript or from text read from a receipt or photo, that text — together with the names of your wallets and categories and your currency code — is sent to our parsing service so that it can be turned into structured transaction details (such as amount, type, merchant, and category). This is what lets Lume understand a phrase like "spent 20 dollars on groceries" or read the total from a receipt.

The text is sent over an encrypted (HTTPS) connection to a Cloudflare Worker that we operate, which forwards it to Anthropic's Claude API for processing.
The text is processed transiently to generate a response and is not stored by our service. Anthropic processes API requests to return a result and, per Anthropic's API terms, does not use this data to train its models.
We do not send your balances, account numbers, full transaction history, identity, or the receipt/photo image — only the text plus the wallet/category names and currency needed to interpret it.

If you do not use voice entry or receipt scanning/upload/sharing, no text is ever sent.

5. Notifications

If you enable notifications, Lume schedules local reminders (for recurring transactions, budget alerts, and a daily logging nudge) directly on your device. These are generated on‑device and are not sent through our servers.

6. Purchases and subscriptions

Lume offers an optional paid upgrade ("Lume Pro"). If you choose to buy it, the payment is processed by Apple through the App Store — we never receive or store your payment card details.

To unlock your purchase and restore it across your devices, we use RevenueCat, a subscription‑management service. RevenueCat receives a record of the purchase (such as the product you bought and Apple's transaction/receipt information) and an anonymous, randomly generated identifier used solely to manage your entitlement.
This information is not linked to your name, email, or any account (Lume has no accounts), and is not used for advertising or tracking.
Apple's and RevenueCat's handling of this data is governed by their respective privacy policies.

If you never make a purchase, no purchase data is sent.

Storage and Sync

On device: App data is stored locally using Apple's SwiftData framework.
iCloud: If you are signed in to iCloud and have iCloud enabled for Lume, your data is synced through Apple's CloudKit to your private iCloud database so it stays consistent across your devices. This data resides in your Apple account; we do not have access to it and cannot read it. Apple's handling of iCloud data is governed by Apple's Privacy Policy.

You can disable iCloud sync for Lume at any time in the iOS Settings app under your Apple Account → iCloud.

Third‑Party Services

Lume relies on the following services strictly to provide its functionality. We do not sell or share your information for advertising.

Service	Purpose	Data involved
Apple iCloud / CloudKit	Optional sync and backup of your data	Your financial data, stored privately in your Apple account
Apple Speech Recognition	Convert spoken voice entries to text	Audio you record during voice entry
Cloudflare (Workers)	Securely route voice transcripts and receipt text to the AI parser	Transcript or receipt text, wallet/category names, currency code (transient; images are never sent)
Anthropic (Claude API)	Extract structured transaction details from a transcript or receipt text	Transcript or receipt text, wallet/category names, currency code (transient; images are never sent; not used for model training)
Apple (App Store / In‑App Purchase)	Process your optional purchase of Lume Pro	Purchase and transaction information (payment is handled by Apple; we do not see your card details)
RevenueCat	Unlock and restore your Lume Pro purchase across devices	Purchase/receipt information and an anonymous identifier (not linked to your identity; not used for advertising or tracking)

These providers act as processors that handle data only as needed to deliver the feature you requested.

Information We Do Not Collect

We do not require or collect names, email addresses, or account credentials.
We do not use analytics, advertising, or crash/diagnostics SDKs.
We do not track you across apps or websites.
We do not maintain a server‑side database of your transactions or balances.

Permissions You Control

Lume asks for permissions only when needed, and you can change them anytime in the iOS Settings app:

Microphone & Speech Recognition — required only for voice entry.
Camera & Photos — required only when you scan or upload a receipt; the image is read on your device and is not uploaded.
Notifications — required only for reminders and budget alerts.
iCloud — controls whether your data syncs across your devices.

Denying any of these still lets you use the rest of the app.

Data Retention and Deletion

Because your data lives on your device and in your iCloud account, you remain in control of it:

Erase All Data — In Settings → Erase All Data, you can permanently delete all transactions, budgets, and wallets and reset Lume to a fresh state. (Your built‑in categories are kept.)
Delete the app — Removing Lume deletes its local data from that device.
Remove iCloud data — You can delete Lume's iCloud data from iOS Settings → your Apple Account → iCloud → Manage Account Storage.

Voice transcripts and receipt/photo text sent for AI parsing are not retained by us after the response is generated, and receipt and photo images are never uploaded.

Security

Data transmitted for voice parsing is sent over encrypted HTTPS connections. On‑device and iCloud data is protected by your device passcode/biometrics and by Apple's platform security. No method of storage or transmission is 100% secure, but we limit collection and transmission to what is strictly necessary.

Children's Privacy

Lume is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, please contact us and we will address it.

Your Rights

Depending on where you live (for example, under Canada's PIPEDA, the EU/UK GDPR, or California's CCPA/CPRA), you may have rights to access, correct, delete, or export your personal information. Because Lume does not collect or store your personal data on our servers, you can exercise these rights directly:

Access / export: Your data is available within the app and your iCloud account.
Deletion: Use Erase All Data, delete the app, or remove the iCloud data.

If you have questions about your rights, contact us using the details below and we will assist where applicable.

International Users

Voice transcripts and receipt/photo text processed for AI parsing may be handled on servers located in other countries (including the United States) by Cloudflare and Anthropic. By using voice entry or receipt scanning, upload, or sharing, you consent to this transient cross‑border processing.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected in the app or on the page where this policy is hosted.

Contact

If you have any questions about this Privacy Policy or your data, contact us at:

Email: lumeappinfo@gmail.com

Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario, Canada, and the federal laws of Canada applicable therein, without regard to its conflict‑of‑law provisions.